JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.249.7.27

138.249.7.27 was found in our database!

This IP was reported 2,195 times. Confidence of Abuse is 97%: ?

97%

ISP	BEST INTERNET SOLUTION XK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35682
Domain Name	eskiz.uz
Country	🇺🇿 Uzbekistan
City	Sirdaryo, Sirdaryo Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.249.7.27

Whois 138.249.7.27

IP Abuse Reports for 138.249.7.27:

This IP address has been reported a total of 2,195 times from 668 distinct sources. 138.249.7.27 was first reported on January 8th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-05-16 18:25:16 (3 weeks ago)	ICS Labs identified 138.249.7.27 as a malicious indicator from threat intelligence.	Hacking
🇫🇷 gooko	2026-05-11 13:55:01 (4 weeks ago)	SSH brute-force attack detected by fail2ban jail 'sshd'	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-04-28 22:30:44 (1 month ago)		Brute-Force Web App Attack
🇩🇪 LoNET	2026-04-28 14:10:49 (1 month ago)	Report 2318573 with IP 3069951 for SSH brute-force attack by source 3360798 via ssh-honeypot/0.2.1+h ... show more Report 2318573 with IP 3069951 for SSH brute-force attack by source 3360798 via ssh-honeypot/0.2.1+http show less	Brute-Force SSH
🇸🇪 HyperSpeed	2026-04-28 14:05:41 (1 month ago)	Apr 28 14:05:39 SE1 sshd[277043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Apr 28 14:05:39 SE1 sshd[277043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.7.27 user=root Apr 28 14:05:41 SE1 sshd[277043]: Failed password for root from 138.249.7.27 port 42554 ssh2 ... show less	Brute-Force SSH
🇫🇷 Sayrix	2026-04-28 13:02:17 (1 month ago)	2026-04-28T15:00:07.487119+02:00 NTE-1 sshd-session[158631]: Failed password for root from 138.249.7 ... show more 2026-04-28T15:00:07.487119+02:00 NTE-1 sshd-session[158631]: Failed password for root from 138.249.7.27 port 57236 ssh2 2026-04-28T15:01:09.930703+02:00 NTE-1 sshd-session[158646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.7.27 user=root 2026-04-28T15:01:12.097524+02:00 NTE-1 sshd-session[158646]: Failed password for root from 138.249.7.27 port 38864 ssh2 2026-04-28T15:02:14.461298+02:00 NTE-1 sshd-session[158661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.7.27 user=root 2026-04-28T15:02:16.554220+02:00 NTE-1 sshd-session[158661]: Failed password for root from 138.249.7.27 port 35778 ssh2 ... show less	Brute-Force SSH
🇫🇮 habs	2026-04-28 12:59:08 (1 month ago)	Apr 28 14:58:03 gateway sshd[1607520]: User root from 138.249.7.27 not allowed because not listed in ... show more Apr 28 14:58:03 gateway sshd[1607520]: User root from 138.249.7.27 not allowed because not listed in AllowUsers Apr 28 14:58:05 gateway sshd[1607520]: Failed password for invalid user root from 138.249.7.27 port 36398 ssh2 Apr 28 14:59:07 gateway sshd[1607561]: User root from 138.249.7.27 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇬🇧 gbzret4d	2026-04-28 12:49:09 (1 month ago)	Honeypot [uk-production01]: Brute-force attack detected on 22/SSH • Credential used: root:sysmail • ... show more Honeypot [uk-production01]: Brute-force attack detected on 22/SSH • Credential used: root:sysmail • Number of login attempts: 1 • Client: SSH-2.0-libssh_0.12.0 show less	SSH
🇦🇺 sh97	2026-04-28 11:56:24 (1 month ago)	AU01-SMC-BGP: SSH Brute Force from 138.249.7.27 at 2026-04-28 17:08:20 IST	Brute-Force SSH
Anonymous	2026-04-28 11:29:16 (1 month ago)	2026-04-28T11:29:15.562255+00:00 Canada1 sshd-session[2027918]: Failed password for root from 138.24 ... show more 2026-04-28T11:29:15.562255+00:00 Canada1 sshd-session[2027918]: Failed password for root from 138.249.7.27 port 35720 ssh2 2026-04-28T11:29:16.149799+00:00 Canada1 sshd-session[2027918]: Disconnected from authenticating user root 138.249.7.27 port 35720 [preauth] ... show less	Brute-Force SSH
Anonymous	2026-04-28 10:50:57 (1 month ago)	2026-04-28T12:49:46.710895 web.evocoach.se sshd-session[9968]: Failed password for root from 138.249 ... show more 2026-04-28T12:49:46.710895 web.evocoach.se sshd-session[9968]: Failed password for root from 138.249.7.27 port 33966 ssh2 2026-04-28T12:50:55.020462 web.evocoach.se sshd-session[9975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.7.27 user=root 2026-04-28T12:50:57.128322 web.evocoach.se sshd-session[9975]: Failed password for root from 138.249.7.27 port 38898 ssh2 ... show less	Brute-Force SSH
🇺🇸 netllama	2026-04-28 10:48:07 (1 month ago)	Apr 28 03:06:02 netllama sshd-session[385243]: User root from 138.249.7.27 not allowed because not l ... show more Apr 28 03:06:02 netllama sshd-session[385243]: User root from 138.249.7.27 not allowed because not listed in AllowUsers Apr 28 03:48:06 netllama sshd-session[389200]: User root from 138.249.7.27 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-28 09:44:29 (1 month ago)	(sshd) Failed SSH login from 138.249.7.27 (UZ/Uzbekistan/-): 5 in the last 3600 secs; Ports: ; Dire ... show more (sshd) Failed SSH login from 138.249.7.27 (UZ/Uzbekistan/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 28 04:24:16 14487 sshd[29052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.7.27 user=root Apr 28 04:24:17 14487 sshd[29052]: Failed password for root from 138.249.7.27 port 44502 ssh2 Apr 28 04:43:06 14487 sshd[30562]: Invalid user rootai from 138.249.7.27 port 54896 Apr 28 04:43:08 14487 sshd[30562]: Failed password for invalid user rootai from 138.249.7.27 port 54896 ssh2 Apr 28 04:44:08 14487 sshd[30644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.7.27 user=root show less	Brute-Force SSH
🇺🇸 R-bear	2026-04-28 08:41:55 (1 month ago)	Apr 28 08:02:45 synth sshd[3120211]: Disconnected from authenticating user root 138.249.7.27 port 38 ... show more Apr 28 08:02:45 synth sshd[3120211]: Disconnected from authenticating user root 138.249.7.27 port 38828 [preauth] Apr 28 08:34:18 synth sshd[3125610]: Disconnected from authenticating user root 138.249.7.27 port 45894 [preauth] Apr 28 08:35:17 synth sshd[3125784]: Disconnected from authenticating user root 138.249.7.27 port 34880 [preauth] Apr 28 08:36:13 synth sshd[3125932]: Disconnected from authenticating user root 138.249.7.27 port 39214 [preauth] Apr 28 08:37:11 synth sshd[3126118]: Disconnected from authenticating user root 138.249.7.27 port 51638 [preauth] Apr 28 08:38:08 synth sshd[3126298]: Disconnected from authenticating user root 138.249.7.27 port 34686 [preauth] Apr 28 08:39:06 synth sshd[3126447]: Disconnected from authenticating user root 138.249.7.27 port 56678 [preauth] Apr 28 08:40:03 synth sshd[3126609]: Disconnected from authenticating user root 138.249.7.27 port 46688 [preauth] Apr 28 08:40:59 synth sshd[3126754]: Disconnected from authenticating user root 138.249. ... show less	Brute-Force SSH
🇷🇺 Reaper	2026-04-28 07:52:13 (1 month ago)	SSH abuse or brute-force attack from 138.249.7.27	Brute-Force SSH

Showing 1 to 15 of 2195 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.43

🇺🇸 54.175.217.100

🇦🇹 45.137.172.116

🇺🇸 34.172.47.224

🇰🇷 221.151.251.129

🇹🇼 221.120.74.68

🇫🇷 193.252.12.178

🇧🇷 189.50.142.78

🇨🇳 180.117.39.52

🇳🇱 176.65.148.99

🇨🇳 153.0.126.48

🇺🇸 147.185.132.10

🇨🇳 121.41.40.112

🇧🇬 78.128.113.22

🇺🇸 34.171.18.154

🇺🇸 34.170.53.97

🇨🇳 14.103.79.11

🇰🇷 211.253.37.225

🇨🇴 190.66.236.85

🇦🇷 181.199.152.241